DCP is an IP core found on NXP SoCs such as i.mx6ull.
While its bigger brother, CAAM, can directly wrap and unwrap blobs
in hardware[0], DCP offers only the bare minimum and the blob
mechanism needs aid from software.
This series adds support for a new trusted keys backend that makes use
of DCP's feature to use hardware keys which can never be read out.
[0] https://lore.kernel.org/lkml/cover.56fff82362af6228372ea82e6bd7e586e23f0966.1615914058.git-series.a.fatoum@pengutronix.de/
---
Cc: Ahmad Fatoum <[email protected]>
Cc: David Gstir <[email protected]>
Cc: David Howells <[email protected]>
Cc: "David S. Miller" <[email protected]>
Cc: Fabio Estevam <[email protected]>
Cc: Herbert Xu <[email protected]>
Cc: James Bottomley <[email protected]>
Cc: James Morris <[email protected]>
Cc: Jarkko Sakkinen <[email protected]>
Cc: Jonathan Corbet <[email protected]>
Cc: [email protected]
Cc: [email protected]
Cc: [email protected]
Cc: [email protected]
Cc: [email protected]
Cc: [email protected]
Cc: [email protected]
Cc: Mimi Zohar <[email protected]>
Cc: NXP Linux Team <[email protected]>
Cc: Pengutronix Kernel Team <[email protected]>
Cc: Richard Weinberger <[email protected]>
Cc: Sascha Hauer <[email protected]>
Cc: "Serge E. Hallyn" <[email protected]>
Cc: Shawn Guo <[email protected]>
David Gstir (1):
doc: trusted-encrypted: add DCP as new trust source
Richard Weinberger (2):
crypto: mxs-dcp: Add support for hardware provided keys
KEYS: trusted: Introduce support for NXP DCP-based trusted keys
.../admin-guide/kernel-parameters.txt | 1 +
.../security/keys/trusted-encrypted.rst | 84 ++++-
MAINTAINERS | 9 +
drivers/crypto/mxs-dcp.c | 110 +++++-
include/keys/trusted_dcp.h | 13 +
include/linux/mxs-dcp.h | 19 +
security/keys/trusted-keys/Makefile | 1 +
security/keys/trusted-keys/trusted_core.c | 6 +-
security/keys/trusted-keys/trusted_dcp.c | 325 ++++++++++++++++++
9 files changed, 554 insertions(+), 14 deletions(-)
create mode 100644 include/keys/trusted_dcp.h
create mode 100644 include/linux/mxs-dcp.h
create mode 100644 security/keys/trusted-keys/trusted_dcp.c
--
2.26.2